Update k8s/core/argocd/values.yaml
All checks were successful
Check with kubeconform / lint (push) Successful in 10s
All checks were successful
Check with kubeconform / lint (push) Successful in 10s
This commit is contained in:
@@ -32,18 +32,22 @@ configs:
|
|||||||
create: true
|
create: true
|
||||||
policy.default: ""
|
policy.default: ""
|
||||||
policy.csv: |
|
policy.csv: |
|
||||||
p, minecraft_manager, applications, get, */minecraft, allow
|
# Policies for "Minecraft Manager" group
|
||||||
p, minecraft_manager, applications, update, */minecraft, allow
|
# Access to minecraft application in argocd project - view, edit, sync
|
||||||
p, minecraft_manager, applications, sync, */minecraft, allow
|
p, Minecraft Manager, applications, get, argocd/minecraft, allow
|
||||||
p, minecraft_manager, applications, action/*, */minecraft, allow
|
p, Minecraft Manager, applications, update, argocd/minecraft, allow
|
||||||
p, minecraft_manager, logs, get, */minecraft, allow
|
p, Minecraft Manager, applications, sync, argocd/minecraft, allow
|
||||||
p, minecraft_manager, applications, *, *, deny
|
|
||||||
p, minecraft_manager, applications, get, */minecraft, allow
|
# Access to actions on minecraft application resources (including restart)
|
||||||
p, minecraft_manager, applications, update, */minecraft, allow
|
p, Minecraft Manager, applications, action/*, argocd/minecraft, allow
|
||||||
p, minecraft_manager, applications, sync, */minecraft, allow
|
|
||||||
p, minecraft_manager, applications, action/*, */minecraft, allow
|
# Access to minecraft application logs
|
||||||
p, minecraft_manager, logs, get, */minecraft, allow
|
p, Minecraft Manager, logs, get, argocd/minecraft, allow
|
||||||
g, Minecraft Manager, role:minecraft-manager
|
|
||||||
|
# Bind group to minecraft role
|
||||||
|
g, Minecraft Manager, role:minecraft
|
||||||
|
|
||||||
|
|
||||||
g, ArgoCD Admins, role:admin
|
g, ArgoCD Admins, role:admin
|
||||||
|
|
||||||
secret:
|
secret:
|
||||||
|
Reference in New Issue
Block a user